Skip to content

[ZT] Global WARP override #20560

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 10 commits into from
Mar 31, 2025
Merged

[ZT] Global WARP override #20560

Changes from 1 commit
Commits
Show all changes
10 commits
Select commit Hold shift + click to select a range
fbda855
global warp override
ranbel Mar 5, 2025
4df3197
global warp override
ranbel Mar 7, 2025
fa5e9af
Update src/content/docs/cloudflare-one/connections/connect-devices/wa…
ranbel Mar 12, 2025
4576f2e
Update src/content/docs/cloudflare-one/connections/connect-devices/wa…
ranbel Mar 12, 2025
514d404
Update src/content/docs/cloudflare-one/connections/connect-devices/wa…
ranbel Mar 12, 2025
66f7e37
Merge branch 'production' into ranbel/warp-global-override
ranbel Mar 18, 2025
8b7333b
ENG feedback
ranbel Mar 18, 2025
f3da9f1
PM feedback
ranbel Mar 19, 2025
8f6473f
Update src/content/docs/cloudflare-one/connections/connect-devices/wa…
ranbel Mar 26, 2025
e40f4d5
Apply suggestions from code review
ranbel Mar 31, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
29 changes: 29 additions & 0 deletions ...are-one/connections/connect-devices/warp/configure-warp/warp-settings/index.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -111,6 +111,35 @@ This setting is primarily used as a prerequisite for [WARP Connector](/cloudflar

The CGNAT IP assigned to a WARP device is permanent until the device unregisters from your Zero Trust organization. Disconnects and reconnects do not change the IP address assignment.

### Global WARP override

<Details header="Feature availability">

| [WARP modes](/cloudflare-one/connections/connect-devices/warp/configure-warp/warp-modes/) | [Zero Trust plans](https://www.cloudflare.com/teams-pricing/) |
| ----------------------------------------------------------------------------------------- | ------------------------------------------------------------- |
| All modes | All plans |

| System | Availability | Minimum WARP version |
| -------- | ------------ | -------------------- |
| Windows | ✅ | 2024.12.554.0 |
| macOS | ✅ | |
| Linux | ✅ | |
| iOS | ✅ | 1.8 |
| Android | ✅ | |
| ChromeOS | ✅ | |

</Details>

:::note
Requires the [Super Administrator](/cloudflare-one/roles-permissions/) role.
:::

When you turn on **Global WARP override**, Cloudflare will immediately disconnect all WARP clients that are currently connected to your Zero Trust organization. This allows WARP to fail open in case of an incident or outage. [Auto connect](#auto-connect) will not apply while the override is on. Users will receive a notification on their device, and the WARP client will display `Error code: GLOBAL_WARP_OVERRIDE`.

If [Lock WARP switch](#lock-warp-switch) is `Disabled`, the user will be able to manually reconnect using the WARP GUI or the `warp-cli connect` command. This allows test users to come back online as needed to test resolution of the incident that led to the global disconnect. It also allows users who may not be impacted by the incident to resume normal operations.

To immediately reconnect all WARP clients, turn off **Global WARP override**.

## Device settings

### Captive portal detection
Expand Down
Loading